Jun 23 08:28:45 bastion LinuxCommandsWazuh: User venky [558682]: 1103 kubectl edit deployment sbert-classifier Jun 23 08:28:59 bastion LinuxCommandsWazuh: User venky [558682]: 1104 kubectl get deploy Jun 23 08:30:14 bastion LinuxCommandsWazuh: User venky [558682]: 1105 kubectl exec -it deploy/urlbird -- bash Jun 23 08:30:27 bastion LinuxCommandsWazuh: User venky [558682]: 1106 kubectl get po | url Jun 23 08:30:30 bastion LinuxCommandsWazuh: User venky [558682]: 1107 kubectl get po | grep url Jun 23 08:30:38 bastion LinuxCommandsWazuh: User venky [558682]: 1107 kubectl get po | grep url Jun 23 08:33:47 bastion LinuxCommandsWazuh: User venky [558913]: 1107 kubectl get po | grep url Jun 23 08:33:50 bastion LinuxCommandsWazuh: User venky [558913]: 1107 kubectl get po | grep url Jun 23 08:36:01 bastion LinuxCommandsWazuh: User venky [558913]: 1107 kubectl get po | grep url Jun 23 08:39:06 bastion LinuxCommandsWazuh: User venky [558913]: 1107 kubectl get po | grep url Jun 23 08:41:09 bastion LinuxCommandsWazuh: User venky [558913]: 1108 kubectl exec -it deploy/urlbird -- bash Jun 23 08:41:10 bastion LinuxCommandsWazuh: User venky [558913]: 1109 git status Jun 23 08:41:15 bastion LinuxCommandsWazuh: message repeated 2 times: [ User venky [558913]: 1109 git status ] Jun 23 10:18:33 bastion LinuxCommandsWazuh: User venky [567938]: 1109 git status Jun 23 10:18:40 bastion LinuxCommandsWazuh: User venky [567938]: 1110 kubectl get po | grep cook Jun 23 10:19:34 bastion LinuxCommandsWazuh: message repeated 11 times: [ User venky [567938]: 1110 kubectl get po | grep cook] Jun 23 10:20:17 bastion LinuxCommandsWazuh: User venky [567938]: 1111 kubetail cooki | grep Demographics_API Jun 23 10:20:23 bastion LinuxCommandsWazuh: User venky [567938]: 1112 kubetail cooki Jun 23 10:20:29 bastion LinuxCommandsWazuh: User venky [567938]: 1113 kubectl get po | grep cook Jun 23 10:23:19 bastion LinuxCommandsWazuh: User venky [567938]: 1114 kubetail cookie-cutter-67bc6f8758 | grep Demographics_API Jun 23 10:24:17 bastion LinuxCommandsWazuh: User venky [567938]: 1115 kubetail cookie-cutter-67bc6f8758 | grep Demographics_API | grep biscuit_ Jun 23 10:28:46 bastion LinuxCommandsWazuh: User venky [567938]: 1116 kubetail cookie-cutter-67bc6f8758 | grep Demographics_API Jun 23 10:28:52 bastion LinuxCommandsWazuh: User venky [567938]: 1117 kubectl get po | grep cook Jun 23 10:29:57 bastion LinuxCommandsWazuh: message repeated 48 times: [ User venky [567938]: 1117 kubectl get po | grep cook] Jun 23 10:30:10 bastion LinuxCommandsWazuh: User venky [567938]: 1118 kubetail cookie-cutter-67bc6f8758 | grep Demographics_API Jun 23 10:30:36 bastion LinuxCommandsWazuh: message repeated 2 times: [ User venky [567938]: 1118 kubetail cookie-cutter-67bc6f8758 | grep Demographics_API] Jun 23 10:30:38 bastion LinuxCommandsWazuh: User venky [567938]: 1119 kubectl get po | grep cook Jun 23 10:30:41 bastion LinuxCommandsWazuh: message repeated 2 times: [ User venky [567938]: 1119 kubectl get po | grep cook] Jun 23 10:30:59 bastion LinuxCommandsWazuh: User venky [567938]: 1119 kubectl get po | grep cook Jun 23 10:31:20 bastion LinuxCommandsWazuh: User venky [567938]: 1120 kubetail cookie-cutter-67bc6f8758 | grep Demographics_API Jun 23 10:31:21 bastion LinuxCommandsWazuh: User venky [567938]: 1120 kubetail cookie-cutter-67bc6f8758 | grep Demographics_API Jun 23 10:31:23 bastion LinuxCommandsWazuh: User venky [567938]: 1120 kubetail cookie-cutter-67bc6f8758 | grep Demographics_API Jun 23 10:31:26 bastion LinuxCommandsWazuh: User venky [567938]: 1121 kubectl get po | grep cook Jun 23 10:33:28 bastion LinuxCommandsWazuh: User venky [567938]: 1122 kubetail cookie-cutter-56fc5dfd49 | grep Demographics_API Jun 23 10:33:29 bastion LinuxCommandsWazuh: User venky [567938]: 1122 kubetail cookie-cutter-56fc5dfd49 | grep Demographics_API Jun 23 10:33:32 bastion LinuxCommandsWazuh: User venky [567938]: 1123 kubectl get po Jun 23 10:33:36 bastion LinuxCommandsWazuh: User venky [567938]: 1124 kubectl get po | grep url Jun 23 10:33:39 bastion LinuxCommandsWazuh: User venky [567938]: 1124 kubectl get po | grep url Jun 23 10:34:02 bastion LinuxCommandsWazuh: User venky [567938]: 1125 kubectl --scale deployment/urlbirld-jobs --replicas=0 Jun 23 10:34:45 bastion LinuxCommandsWazuh: User venky [567938]: 1126 kubectl scale deployment/urlbirld-jobs --replicas=0 Jun 23 10:35:15 bastion LinuxCommandsWazuh: User venky [567938]: 1127 kubectl scale --replicas=0 deployment/urlbirld-jobs Jun 23 10:36:44 bastion LinuxCommandsWazuh: User venky [567938]: 1128 kubectl scale --replicas=0 deployment/urlbirld-jobs -n nitrox-production Jun 23 10:36:56 bastion LinuxCommandsWazuh: User venky [567938]: 1129 kubectl get namespaces Jun 23 10:37:02 bastion LinuxCommandsWazuh: User venky [567938]: 1130 kubectl scale --replicas=0 deployment/urlbirld-jobs -n nitrox-production Jun 23 10:37:19 bastion LinuxCommandsWazuh: User venky [567938]: 1131 kubectl get deployments -n nitrox-production Jun 23 10:37:24 bastion LinuxCommandsWazuh: User venky [567938]: 1132 kubectl get deployments -n nitrox-production | grep url Jun 23 10:37:51 bastion LinuxCommandsWazuh: User venky [567938]: 1132 kubectl get deployments -n nitrox-production | grep url Jun 23 10:37:51 bastion LinuxCommandsWazuh: User venky [567938]: 1132 kubectl get deployments -n nitrox-production | grep url Jun 23 10:37:58 bastion LinuxCommandsWazuh: User venky [567938]: 1132 kubectl get deployments -n nitrox-production | grep url Jun 23 10:38:09 bastion LinuxCommandsWazuh: User venky [567938]: 1133 kubectl scale --replicas=0 deployment/urlbird-jobs -n nitrox-production Jun 23 10:38:40 bastion LinuxCommandsWazuh: User venky [567938]: 1134 kubetail cookie-cutter-56fc5dfd49 | grep Demographics_API Jun 23 10:38:44 bastion LinuxCommandsWazuh: message repeated 4 times: [ User venky [567938]: 1134 kubetail cookie-cutter-56fc5dfd49 | grep Demographics_API] Jun 23 10:44:02 bastion LinuxCommandsWazuh: User venky [567938]: 1135 kubetail cookie-cutter- | grep Demographics_API Jun 23 10:50:23 bastion LinuxCommandsWazuh: User venky [567938]: 1136 kubetail cookie-cutter-56fc5dfd49 | grep Demographics_API Jun 23 10:50:34 bastion LinuxCommandsWazuh: User venky [567938]: 1137 kubectl get po | grep cooki Jun 23 10:50:52 bastion LinuxCommandsWazuh: message repeated 11 times: [ User venky [567938]: 1137 kubectl get po | grep cooki] Jun 23 10:51:28 bastion LinuxCommandsWazuh: User venky [567938]: 1138 kubetail cookie-cutter-857d865b8c | grep Avatar.compile_profile Jun 23 10:59:43 bastion LinuxCommandsWazuh: User venky [567938]: 1139 kubetail cookie-cutter-857d865b8c | grep "Avatar.compile_profile" Jun 23 10:59:46 bastion LinuxCommandsWazuh: User venky [567938]: 1140 kubectl get po | grep cooki Jun 23 11:00:01 bastion LinuxCommandsWazuh: message repeated 2 times: [ User venky [567938]: 1140 kubectl get po | grep cooki] Jun 23 11:00:01 bastion LinuxCommandsWazuh: User venky [567938]: 1140 kubectl get po | grep cooki Jun 23 11:00:03 bastion LinuxCommandsWazuh: message repeated 7 times: [ User venky [567938]: 1140 kubectl get po | grep cooki] Jun 23 11:00:46 bastion LinuxCommandsWazuh: User venky [567938]: 1141 kubetail cookie-cutter-7f67cc875d | grep "Avatar.compile_profile" Jun 23 11:00:54 bastion LinuxCommandsWazuh: User venky [567938]: 1142 kubetail cookie-cutter-7f67cc875d Jun 23 11:01:13 bastion LinuxCommandsWazuh: User venky [567938]: 1143 kubetail cookie-cutter-7f67cc875d | grep "Avatar.compile_profile" Jun 23 11:02:09 bastion LinuxCommandsWazuh: User venky [567938]: 1143 kubetail cookie-cutter-7f67cc875d | grep "Avatar.compile_profile" Jun 23 11:06:02 bastion LinuxCommandsWazuh: User venky [567938]: 1143 kubetail cookie-cutter-7f67cc875d | grep "Avatar.compile_profile" Jun 23 11:06:02 bastion LinuxCommandsWazuh: message repeated 3 times: [ User venky [567938]: 1143 kubetail cookie-cutter-7f67cc875d | grep "Avatar.compile_profile"] Jun 23 11:06:09 bastion LinuxCommandsWazuh: User venky [567938]: 1144 kubectl scale --replicas=12 deployment/urlbird-jobs -n nitrox-production Jun 23 11:16:14 bastion LinuxCommandsWazuh: User mohtashim [3013801]: 809 mongo pixel_v1 Jun 23 11:17:01 bastion LinuxCommandsWazuh: User mohtashim [3013801]: 809 mongo pixel_v1 Jun 23 11:17:04 bastion LinuxCommandsWazuh: User mohtashim [3013801]: 810 xit Jun 23 11:42:46 bastion LinuxCommandsWazuh: User ankit [3015696]: 186 exit Jun 23 11:42:59 bastion LinuxCommandsWazuh: User ankit [3015696]: 187 kubectl get pods -n nitrox-production Jun 23 11:43:30 bastion LinuxCommandsWazuh: User ankit [3015696]: 188 kubectl get ns Jun 23 11:46:06 bastion LinuxCommandsWazuh: User ankit [3015696]: 189 kubectl get pods -n nitrox-production | grep datapulsekubectl config set-context --current --namespace=nitrox-production Jun 23 11:46:09 bastion LinuxCommandsWazuh: User ankit [3015696]: 190 kubectl config set-context --current --namespace=nitrox-production Jun 23 11:46:20 bastion LinuxCommandsWazuh: User ankit [3015696]: 191 kubectl get pods Jun 23 11:46:28 bastion LinuxCommandsWazuh: User ankit [3015696]: 192 kubectl config view --minify | grep namespace Jun 23 11:48:09 bastion LinuxCommandsWazuh: User ankit [3015696]: 193 k get ns Jun 23 11:48:18 bastion LinuxCommandsWazuh: User ankit [3015696]: 194 ls Jun 23 11:48:19 bastion LinuxCommandsWazuh: User ankit [3015696]: 195 cd / Jun 23 11:48:20 bastion LinuxCommandsWazuh: User ankit [3015696]: 196 ls Jun 23 11:48:50 bastion LinuxCommandsWazuh: User ankit [3015696]: 197 nano ~/.bashrc Jun 23 11:48:56 bastion LinuxCommandsWazuh: User ankit [3015696]: 198 source ~/.bashrc Jun 23 11:49:10 bastion LinuxCommandsWazuh: User ankit [3015696]: 199 kprod get prods Jun 23 11:49:29 bastion LinuxCommandsWazuh: User ankit [3015696]: 200 k get ns Jun 23 11:49:43 bastion LinuxCommandsWazuh: User ankit [3015696]: 201 kgetpods Jun 23 11:50:11 bastion LinuxCommandsWazuh: User ankit [3015696]: 202 kprod Jun 23 11:50:25 bastion LinuxCommandsWazuh: User ankit [3015696]: 203 kgetpods Jun 23 12:16:04 bastion LinuxCommandsWazuh: User ankit [3019484]: 204 exit Jun 23 12:16:31 bastion LinuxCommandsWazuh: User ankit [3019484]: 205 ssh ubuntu@34.131.126.168 Jun 23 12:53:02 bastion LinuxCommandsWazuh: User ankit [3019484]: 206 k get pvc Jun 23 13:02:26 bastion LinuxCommandsWazuh: User ankit [3019484]: 207 kgetpods Jun 23 13:02:32 bastion LinuxCommandsWazuh: User ankit [3019484]: 208 k get ns Jun 23 13:02:39 bastion LinuxCommandsWazuh: User ankit [3019484]: 209 k get pvc -n loki Jun 23 13:31:17 bastion LinuxCommandsWazuh: User ankit [3019484]: 210 k get ds -n loki Jun 23 13:40:14 bastion LinuxCommandsWazuh: User ankur [3026272]: 1407 exit Jun 23 13:40:15 bastion LinuxCommandsWazuh: User ankur [3026272]: 1408 lks Jun 23 13:40:16 bastion LinuxCommandsWazuh: User ankur [3026272]: 1409 ls Jun 23 13:41:16 bastion LinuxCommandsWazuh: User ankur [2882484]: 1403 exitg Jun 23 13:42:18 bastion LinuxCommandsWazuh: User ankur [3026272]: 1410 byobu Jun 23 13:59:40 bastion LinuxCommandsWazuh: User ubuntu [3029965]: 1103 sudo su venky Jun 23 13:59:53 bastion LinuxCommandsWazuh: User ubuntu [3029965]: 1104 crontab -e Jun 23 14:00:10 bastion LinuxCommandsWazuh: User ankit [3019484]: 211 k describe demonset promptail -n loki Jun 23 14:00:34 bastion LinuxCommandsWazuh: User ankit [3019484]: 212 k describe ds promptail -n loki Jun 23 14:00:47 bastion LinuxCommandsWazuh: User ankit [3019484]: 213 k describe ds promtail -n loki Jun 23 14:11:23 bastion LinuxCommandsWazuh: User ubuntu [3029965]: 1105 cd bin/ Jun 23 14:11:23 bastion LinuxCommandsWazuh: User ubuntu [3029965]: 1106 ls Jun 23 14:11:26 bastion LinuxCommandsWazuh: User ubuntu [3029965]: 1107 cat prometheus_clean.sh Jun 23 14:13:40 bastion LinuxCommandsWazuh: User ankit [3019484]: 214 helm list Jun 23 14:14:43 bastion LinuxCommandsWazuh: User ankit [3019484]: 215 helm show chart Jun 23 14:14:56 bastion LinuxCommandsWazuh: User ankit [3019484]: 216 helm -help Jun 23 14:15:12 bastion LinuxCommandsWazuh: User ankit [3019484]: 217 helm --help Jun 23 14:15:50 bastion LinuxCommandsWazuh: User ubuntu [3029965]: 1108 LS Jun 23 14:16:01 bastion LinuxCommandsWazuh: User ankit [3032601]: 204 exit Jun 23 14:16:02 bastion LinuxCommandsWazuh: User ankit [3032601]: 205 cd Jun 23 14:16:05 bastion LinuxCommandsWazuh: User ankit [3032601]: 206 cd .dd Jun 23 14:16:07 bastion LinuxCommandsWazuh: User ankit [3032601]: 207 cd .ssh/ Jun 23 14:16:07 bastion LinuxCommandsWazuh: User ankit [3032601]: 208 ls Jun 23 14:16:09 bastion LinuxCommandsWazuh: User ankit [3032601]: 209 cat authorized_keys Jun 23 14:16:23 bastion LinuxCommandsWazuh: User ankit [3032601]: 210 ssk-keygen Jun 23 14:17:44 bastion LinuxCommandsWazuh: User ankit [3032601]: 211 ssk-keyjen Jun 23 14:17:48 bastion LinuxCommandsWazuh: User ankit [3032601]: 211 ssk-keyjen Jun 23 14:18:00 bastion LinuxCommandsWazuh: User ankit [3032601]: 212 ssh-keygen Jun 23 14:18:01 bastion LinuxCommandsWazuh: User ankit [3032601]: 213 l Jun 23 14:18:02 bastion LinuxCommandsWazuh: User ankit [3032601]: 214 ls Jun 23 14:18:05 bastion LinuxCommandsWazuh: User ankit [3032601]: 215 cat id_rsa.pub Jun 23 14:19:00 bastion LinuxCommandsWazuh: User ankit [3032601]: 216 cd Jun 23 14:19:56 bastion LinuxCommandsWazuh: User ankit [3032601]: 217 vi .bashrc Jun 23 14:20:03 bastion LinuxCommandsWazuh: User ankit [3032601]: 218 ssh ubbuntu@34.131.103.89 Jun 23 14:21:25 bastion LinuxCommandsWazuh: User ankit [3032601]: 219 vi .bashrc Jun 23 14:22:16 bastion LinuxCommandsWazuh: User ankit [3019484]: 218 ssh ankit@internal_server Jun 23 14:45:40 bastion LinuxCommandsWazuh: User ankit [3032601]: 220 ssh ankit@34.131.103.89 Jun 23 14:53:27 bastion LinuxCommandsWazuh: User ubuntu [3029965]: 1109 sudo su ankit Jun 23 14:55:00 bastion LinuxCommandsWazuh: User ubuntu [3035327]: 1110 exit Jun 23 14:55:14 bastion LinuxCommandsWazuh: User ubuntu [3035327]: 1111 byobu Jun 23 15:54:53 bastion LinuxCommandsWazuh: User ankit [3019484]: 219 ssh ankit@internal-tools Jun 23 15:55:08 bastion LinuxCommandsWazuh: User ankit [3019484]: 220 su ubuntu Jun 23 15:55:09 bastion LinuxCommandsWazuh: User ankit [3019484]: 220 su ubuntu Jun 23 15:55:18 bastion LinuxCommandsWazuh: User ubuntu [3040640]: 1423 exit Jun 23 15:55:20 bastion LinuxCommandsWazuh: User ubuntu [3040640]: 1424 ls Jun 23 15:56:36 bastion LinuxCommandsWazuh: User ubuntu [3040640]: 1425 clear Jun 23 15:56:42 bastion LinuxCommandsWazuh: User ubuntu [3040640]: 1426 crontab -l Jun 23 15:57:36 bastion LinuxCommandsWazuh: User ubuntu [3040640]: 1427 cd /bin Jun 23 15:57:37 bastion LinuxCommandsWazuh: User ubuntu [3040640]: 1428 ls Jun 23 15:58:31 bastion LinuxCommandsWazuh: User ubuntu [3040640]: 1429 crontab -l Jun 23 15:58:40 bastion LinuxCommandsWazuh: User ubuntu [3040640]: 1430 crontab Jun 23 15:58:42 bastion LinuxCommandsWazuh: User ubuntu [3040640]: 1431 crontab -l Jun 23 15:58:55 bastion LinuxCommandsWazuh: User ubuntu [3040640]: 1432 cat /etc/crontab Jun 23 15:59:06 bastion LinuxCommandsWazuh: User ubuntu [3040640]: 1433 clear Jun 23 15:59:08 bastion LinuxCommandsWazuh: User ubuntu [3040640]: 1434 cat /etc/crontab Jun 23 15:59:09 bastion LinuxCommandsWazuh: User ubuntu [3041633]: 1423 exit Jun 23 15:59:12 bastion LinuxCommandsWazuh: User ubuntu [3041633]: 1423 exit Jun 23 15:59:18 bastion LinuxCommandsWazuh: User ubuntu [3041633]: 1424 psql Jun 23 15:59:30 bastion LinuxCommandsWazuh: User ubuntu [3041633]: 1425 vi .bashrc Jun 23 15:59:35 bastion LinuxCommandsWazuh: User ubuntu [3040640]: 1435 crontab -l Jun 23 15:59:54 bastion LinuxCommandsWazuh: User ubuntu [3040640]: 1436 cat prometheus_clean.sh Jun 23 16:00:08 bastion LinuxCommandsWazuh: User ubuntu [3040640]: 1437 ls | prometheus_clean.sh Jun 23 16:00:54 bastion LinuxCommandsWazuh: User ubuntu [3040640]: 1437 ls | prometheus_clean.sh Jun 23 16:01:26 bastion LinuxCommandsWazuh: User ubuntu [3040640]: 1438 ls Jun 23 16:01:28 bastion LinuxCommandsWazuh: User ubuntu [3040640]: 1439 cd Jun 23 16:01:31 bastion LinuxCommandsWazuh: User ubuntu [3040640]: 1440 ls Jun 23 16:01:47 bastion LinuxCommandsWazuh: User ubuntu [3040640]: 1441 cd bin/ Jun 23 16:01:48 bastion LinuxCommandsWazuh: User ubuntu [3040640]: 1442 ls Jun 23 16:01:54 bastion LinuxCommandsWazuh: User ubuntu [3040640]: 1443 ll Jun 23 16:02:38 bastion LinuxCommandsWazuh: User ubuntu [3040640]: 1444 pwd Jun 23 16:02:58 bastion LinuxCommandsWazuh: User ubuntu [3040640]: 1445 cat prometheus_clean.sh Jun 23 16:03:54 bastion LinuxCommandsWazuh: User ubuntu [3040640]: 1445 cat prometheus_clean.sh Jun 23 16:03:56 bastion LinuxCommandsWazuh: User ubuntu [3040640]: 1446 cd .. Jun 23 16:03:57 bastion LinuxCommandsWazuh: User ubuntu [3040640]: 1447 ls Jun 23 16:04:09 bastion LinuxCommandsWazuh: User ubuntu [3040640]: 1448 ccd .. Jun 23 16:04:11 bastion LinuxCommandsWazuh: User ubuntu [3040640]: 1449 cd .. Jun 23 16:04:12 bastion LinuxCommandsWazuh: User ubuntu [3040640]: 1450 ls Jun 23 16:04:17 bastion LinuxCommandsWazuh: User ubuntu [3040640]: 1451 cd /bin/ Jun 23 16:04:18 bastion LinuxCommandsWazuh: User ubuntu [3040640]: 1452 ls Jun 23 16:04:23 bastion LinuxCommandsWazuh: User ubuntu [3040640]: 1453 cd .. Jun 23 16:04:24 bastion LinuxCommandsWazuh: User ubuntu [3040640]: 1454 ls Jun 23 16:04:25 bastion LinuxCommandsWazuh: User ubuntu [3040640]: 1455 cd home/ Jun 23 16:04:26 bastion LinuxCommandsWazuh: User ubuntu [3040640]: 1456 ls Jun 23 16:04:46 bastion LinuxCommandsWazuh: User ubuntu [3040640]: 1457 cd ubuntu/ Jun 23 16:04:47 bastion LinuxCommandsWazuh: User ubuntu [3040640]: 1458 ls Jun 23 16:04:49 bastion LinuxCommandsWazuh: User ubuntu [3040640]: 1459 cd bin/ Jun 23 16:04:49 bastion LinuxCommandsWazuh: User ubuntu [3040640]: 1460 ls Jun 23 16:04:53 bastion LinuxCommandsWazuh: User ubuntu [3040640]: 1461 cat prometheus_clean.sh Jun 23 16:05:12 bastion LinuxCommandsWazuh: User ubuntu [3040640]: 1462 cat /data/script/prometheus_cleanup.sh Jun 23 16:07:01 bastion LinuxCommandsWazuh: User ubuntu [3040640]: 1463 cd .. Jun 23 16:07:06 bastion LinuxCommandsWazuh: User ubuntu [3040640]: 1464 ls Jun 23 16:10:36 bastion LinuxCommandsWazuh: User ashish [3042938]: 50 exit Jun 23 16:10:38 bastion LinuxCommandsWazuh: User ashish [3042938]: 51 ls Jun 23 16:10:47 bastion LinuxCommandsWazuh: User ubuntu [3040640]: 1465 cat /data/script/prometheus_cleanup.sh Jun 23 16:11:06 bastion LinuxCommandsWazuh: User ubuntu [3040640]: 1466 kubectl get pods -n loki Jun 23 16:11:23 bastion LinuxCommandsWazuh: User ashish [3042938]: 52 redis Jun 23 16:11:33 bastion LinuxCommandsWazuh: User ashish [3042938]: 53 redis-cli llen dramatiq:default Jun 23 16:12:13 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ashish [3042938]: 53 redis-cli llen dramatiq:default] Jun 23 16:12:18 bastion LinuxCommandsWazuh: User ashish [3042938]: 53 redis-cli llen dramatiq:default Jun 23 16:12:20 bastion LinuxCommandsWazuh: User ashish [3042938]: 53 redis-cli llen dramatiq:default Jun 23 16:14:04 bastion LinuxCommandsWazuh: User ashish [3042938]: 53 redis-cli llen dramatiq:default Jun 23 16:18:21 bastion LinuxCommandsWazuh: User ubuntu [3040640]: 1467 helm list -n loki Jun 23 16:18:42 bastion LinuxCommandsWazuh: User ankit [3044009]: 237 exit Jun 23 16:49:09 bastion LinuxCommandsWazuh: User ubuntu [3046661]: 1471 exit Jun 23 16:49:14 bastion LinuxCommandsWazuh: User ubuntu [3046674]: 1471 exit Jun 23 16:49:22 bastion LinuxCommandsWazuh: User ubuntu [3046674]: 1472 cd .ssh/ Jun 23 16:49:33 bastion LinuxCommandsWazuh: User ubuntu [3046674]: 1473 sudo vi authorized_keys Jun 23 16:49:40 bastion LinuxCommandsWazuh: User ubuntu [3046674]: 1474 cd Jun 23 16:49:41 bastion LinuxCommandsWazuh: User ubuntu [3046674]: 1475 cd .. Jun 23 16:49:42 bastion LinuxCommandsWazuh: User ubuntu [3046674]: 1476 ls Jun 23 16:49:50 bastion LinuxCommandsWazuh: User abhijeet [3046732]: Jun 23 16:49:52 bastion LinuxCommandsWazuh: User abhijeet [3046732]: 1 ls Jun 23 16:50:11 bastion LinuxCommandsWazuh: User abhijeet [3046732]: 2 curl ifconfig.me Jun 23 16:50:24 bastion LinuxCommandsWazuh: message repeated 5 times: [ User abhijeet [3046732]: 2 curl ifconfig.me] Jun 23 16:50:25 bastion LinuxCommandsWazuh: User abhijeet [3046732]: 3 cd Jun 23 16:50:25 bastion LinuxCommandsWazuh: User abhijeet [3046732]: 4 ls Jun 23 16:52:39 bastion LinuxCommandsWazuh: User ankit [3046884]: 237 exit Jun 23 16:52:41 bastion LinuxCommandsWazuh: User ankit [3046884]: 238 ls Jun 23 16:52:46 bastion LinuxCommandsWazuh: User ankit [3046884]: 239 su ubuntu Jun 23 16:52:55 bastion LinuxCommandsWazuh: User abhijeet [3046990]: Jun 23 16:52:59 bastion LinuxCommandsWazuh: User abhijeet [3046990]: 1 ls Jun 23 16:53:18 bastion LinuxCommandsWazuh: User abhijeet [3046990]: 1 ls Jun 23 16:53:21 bastion LinuxCommandsWazuh: User abhijeet [3046990]: 2 cat /etc/os-release Jun 23 16:53:31 bastion LinuxCommandsWazuh: User abhijeet [3046990]: 3 ls Jun 23 16:53:47 bastion LinuxCommandsWazuh: User abhijeet [3046990]: 4 pwd Jun 23 16:53:56 bastion LinuxCommandsWazuh: User abhijeet [3046990]: 5 cd .. Jun 23 16:53:57 bastion LinuxCommandsWazuh: User abhijeet [3046990]: 6 ls Jun 23 16:54:00 bastion LinuxCommandsWazuh: User abhijeet [3046990]: 7 cat service.json Jun 23 16:54:18 bastion LinuxCommandsWazuh: User abhijeet [3046732]: 5 cp /home/ubuntu/README.md . Jun 23 16:54:26 bastion LinuxCommandsWazuh: User abhijeet [3046732]: 6 cp /home/ubuntu/Makefile Jun 23 16:54:28 bastion LinuxCommandsWazuh: User abhijeet [3046732]: 7 cp /home/ubuntu/Makefile . Jun 23 16:54:29 bastion LinuxCommandsWazuh: User abhijeet [3046732]: 8 ls Jun 23 16:54:30 bastion LinuxCommandsWazuh: User abhijeet [3046732]: ll Jun 23 16:54:37 bastion LinuxCommandsWazuh: User abhijeet [3046732]: 10 ls Jun 23 16:54:38 bastion LinuxCommandsWazuh: User ubuntu [3046674]: 1477 sudo su abhijeet Jun 23 16:54:41 bastion LinuxCommandsWazuh: User ubuntu [3046661]: 1472 sudo su ubuntu Jun 23 16:55:08 bastion LinuxCommandsWazuh: User ankit [3046884]: 240 ssh ankit@internal-tools Jun 23 16:55:13 bastion LinuxCommandsWazuh: User ankit [3046884]: 241 su ubuntu Jun 23 16:55:29 bastion LinuxCommandsWazuh: User ubuntu [3047238]: 1480 exit Jun 23 16:55:30 bastion LinuxCommandsWazuh: User ubuntu [3047238]: 1481 ls Jun 23 16:55:33 bastion LinuxCommandsWazuh: User ubuntu [3047238]: 1482 cd bin/ Jun 23 16:55:34 bastion LinuxCommandsWazuh: User ubuntu [3047238]: 1483 ls Jun 23 16:55:44 bastion LinuxCommandsWazuh: User ubuntu [3047238]: 1484 cat prometheus_clean.sh Jun 23 16:59:30 bastion LinuxCommandsWazuh: User ankur [3048069]: 1440 exit Jun 23 16:59:37 bastion LinuxCommandsWazuh: User ankur [3048154]: 1440 exit Jun 23 17:01:08 bastion LinuxCommandsWazuh: User mohtashim [3049860]: 811 exit Jun 23 17:01:21 bastion LinuxCommandsWazuh: User mohtashim [3049860]: 812 psql -h 10.94.16.3 -U postgres -d datapulse_v1 Jun 23 17:01:36 bastion LinuxCommandsWazuh: User ubuntu [3047238]: 1485 ls Jun 23 17:07:31 bastion LinuxCommandsWazuh: User abhijeet [3056609]: 18 cat service.json Jun 23 17:07:33 bastion LinuxCommandsWazuh: User abhijeet [3056609]: 19 ls Jun 23 17:07:37 bastion LinuxCommandsWazuh: User abhijeet [3056609]: 20 cat README.md Jun 23 17:08:01 bastion LinuxCommandsWazuh: User abhijeet [3056609]: 21 kubectl get all Jun 23 17:08:08 bastion LinuxCommandsWazuh: User mohtashim [3049860]: 812 psql -h 10.94.16.3 -U postgres -d datapulse_v1 Jun 23 17:08:13 bastion LinuxCommandsWazuh: User ankur [3048154]: 1441 byobu\ Jun 23 17:11:25 bastion LinuxCommandsWazuh: User ankit [3044009]: 238 ssh ankit@internal-tools Jun 23 17:11:56 bastion LinuxCommandsWazuh: User ankur [3057411]: 1442 exit Jun 23 17:12:10 bastion LinuxCommandsWazuh: User abhijeet [3056609]: 22 ls Jun 23 17:12:12 bastion LinuxCommandsWazuh: User abhijeet [3056609]: 23 cat m Jun 23 17:12:14 bastion LinuxCommandsWazuh: User abhijeet [3056609]: 24 cat Makefile Jun 23 17:12:59 bastion LinuxCommandsWazuh: User abhijeet [3056609]: 24 cat Makefile Jun 23 17:12:59 bastion LinuxCommandsWazuh: message repeated 3 times: [ User abhijeet [3056609]: 24 cat Makefile ] Jun 23 17:13:00 bastion LinuxCommandsWazuh: User abhijeet [3056609]: 25 ls Jun 23 17:13:01 bastion LinuxCommandsWazuh: User abhijeet [3056609]: 26 cd .. Jun 23 17:13:01 bastion LinuxCommandsWazuh: User abhijeet [3056609]: 27 ls Jun 23 17:16:40 bastion LinuxCommandsWazuh: User ankit [3062780]: 244 exit Jun 23 17:16:41 bastion LinuxCommandsWazuh: User ankit [3062780]: 245 ls Jun 23 18:12:41 bastion LinuxCommandsWazuh: User adil [3118759]: 121 byobu Jun 23 18:12:45 bastion LinuxCommandsWazuh: User adil [3118759]: 122 cd nitrox Jun 23 18:12:47 bastion LinuxCommandsWazuh: User adil [3118759]: 123 ls Jun 23 18:12:48 bastion LinuxCommandsWazuh: User adil [3118759]: 124 ll Jun 23 18:13:25 bastion LinuxCommandsWazuh: User ankit [3062780]: 246 ssh ankit@internal-tools Jun 23 18:13:30 bastion LinuxCommandsWazuh: User ankit [3120266]: 247 exit Jun 23 18:13:35 bastion LinuxCommandsWazuh: User ankit [3120266]: 248 whosmi Jun 23 18:13:36 bastion LinuxCommandsWazuh: User ankit [3120266]: 249 whoami Jun 23 18:13:48 bastion LinuxCommandsWazuh: User ankit [3120266]: 250 k get ns Jun 23 18:14:32 bastion LinuxCommandsWazuh: User ankit [3120266]: 251 k get -n nitro-production Jun 23 18:14:40 bastion LinuxCommandsWazuh: User ankit [3120266]: 252 history Jun 23 18:14:49 bastion LinuxCommandsWazuh: User ankit [3120266]: 252 history Jun 23 18:14:53 bastion LinuxCommandsWazuh: User ankit [3120266]: 253 kubectl get pods -n nitrox-production Jun 23 18:15:14 bastion LinuxCommandsWazuh: User ankit [3120266]: 254 kubectl get pods -n loki Jun 23 18:15:27 bastion LinuxCommandsWazuh: User ankit [3120266]: 255 helm show chart Jun 23 18:23:26 bastion LinuxCommandsWazuh: User venky [3139586]: 1144 kubectl scale --replicas=12 deployment/urlbird-jobs -n nitrox-production Jun 23 18:35:32 bastion LinuxCommandsWazuh: User abhijeet [3162588]: 27 ls Jun 23 18:35:46 bastion LinuxCommandsWazuh: User abhijeet [3162588]: 27 ls Jun 23 18:35:48 bastion LinuxCommandsWazuh: User abhijeet [3162588]: 28 cd .. Jun 23 18:35:49 bastion LinuxCommandsWazuh: User abhijeet [3162588]: 29 ls Jun 23 18:36:39 bastion LinuxCommandsWazuh: User abhijeet [3162588]: 30 cd abhijeet/ Jun 23 18:36:39 bastion LinuxCommandsWazuh: User abhijeet [3162588]: 31 l Jun 23 18:36:42 bastion LinuxCommandsWazuh: User abhijeet [3162588]: 32 ls Jun 23 18:36:45 bastion LinuxCommandsWazuh: User abhijeet [3162588]: 33 cat Makefile Jun 23 18:38:55 bastion LinuxCommandsWazuh: User abhijeet [3162588]: 34 kubectl version --client Jun 23 18:46:10 bastion LinuxCommandsWazuh: User abhijeet [3162588]: 35 kubectl get all -A Jun 23 18:48:01 bastion LinuxCommandsWazuh: User abhijeet [3162588]: 36 cat /etc/google-cloud-ops-agent/config.yaml Jun 23 18:48:33 bastion LinuxCommandsWazuh: User abhijeet [3162588]: 37 find / -name kube Jun 23 18:48:35 bastion LinuxCommandsWazuh: User abhijeet [3162588]: 38 ls Jun 23 18:48:38 bastion LinuxCommandsWazuh: User abhijeet [3162588]: 39 cat README.md Jun 23 18:49:29 bastion LinuxCommandsWazuh: User abhijeet [3162588]: 40 ls Jun 23 18:52:52 bastion LinuxCommandsWazuh: User venky [3139586]: 1145 psql -h 10.94.16.3 -U postgres Jun 23 18:54:22 bastion LinuxCommandsWazuh: User venky [3139586]: 1145 psql -h 10.94.16.3 -U postgres Jun 23 18:54:22 bastion LinuxCommandsWazuh: message repeated 2 times: [ User venky [3139586]: 1145 psql -h 10.94.16.3 -U postgres] Jun 23 18:54:34 bastion LinuxCommandsWazuh: User venky [3139586]: 1146 kubectl get configmaps Jun 23 18:55:06 bastion LinuxCommandsWazuh: User venky [3139586]: 1147 kubectl edit configmap datapulse-patched-config Jun 23 18:59:22 bastion LinuxCommandsWazuh: User mohtashim [3209048]: 813 exit Jun 23 19:00:09 bastion LinuxCommandsWazuh: User rihan [3210695]: 1059 redis Jun 23 19:00:23 bastion LinuxCommandsWazuh: User mohtashim [3209048]: 814 psql -h 10.94.16.3 -U postgres -d vortex_v1 Jun 23 19:00:27 bastion LinuxCommandsWazuh: User mohtashim [3209048]: 815 psql -h 10.94.16.3 -U postgres -d vortex_v2 Jun 23 19:02:08 bastion LinuxCommandsWazuh: User mohtashim [3209048]: 815 psql -h 10.94.16.3 -U postgres -d vortex_v2 Jun 23 19:02:51 bastion LinuxCommandsWazuh: User mohtashim [3215820]: 816 exit Jun 23 19:05:56 bastion LinuxCommandsWazuh: User rihan [3210695]: 1060 psql -d vortex_v2 -U postgres Jun 23 19:06:28 bastion LinuxCommandsWazuh: User rihan [3221295]: 1060 psql -d vortex_v2 -U postgres Jun 23 19:06:32 bastion LinuxCommandsWazuh: User rihan [3221295]: 1060 psql -d vortex_v2 -U postgres Jun 23 19:08:40 bastion LinuxCommandsWazuh: User ankur [3223457]: 1443 byobu Jun 23 19:08:45 bastion LinuxCommandsWazuh: User ankur [3223723]: 1443 byobu Jun 23 19:08:53 bastion LinuxCommandsWazuh: User ankur [3223723]: 1444 k get pods | vortex Jun 23 19:08:57 bastion LinuxCommandsWazuh: User ankur [3223723]: 1445 k get pods | grep vortex Jun 23 19:10:00 bastion LinuxCommandsWazuh: User ankur [3223723]: 1445 k get pods | grep vortex Jun 23 19:11:12 bastion LinuxCommandsWazuh: User ankur [3223723]: 1446 k logs -f vortex-dramatiq-6bc4b77db8-xxmmw Jun 23 19:11:13 bastion LinuxCommandsWazuh: message repeated 4 times: [ User ankur [3223723]: 1446 k logs -f vortex-dramatiq-6bc4b77db8-xxmmw] Jun 23 19:11:19 bastion LinuxCommandsWazuh: User ankur [3223457]: 1443 byobu Jun 23 19:26:31 bastion LinuxCommandsWazuh: User abhijeet [3244527]: 40 ls Jun 23 19:26:49 bastion LinuxCommandsWazuh: User abhijeet [3244527]: 40 ls Jun 23 19:30:04 bastion LinuxCommandsWazuh: User venky [3139586]: 1148 psql -h 10.94.16.3 -U postgres -d datapulse_v1 Jun 23 19:33:45 bastion LinuxCommandsWazuh: User abhijeet [3244527]: 40 ls Jun 23 19:33:47 bastion LinuxCommandsWazuh: User abhijeet [3244527]: 41 cd .. Jun 23 19:33:47 bastion LinuxCommandsWazuh: User abhijeet [3244527]: 42 ls Jun 23 19:34:00 bastion LinuxCommandsWazuh: User abhijeet [3244527]: 43 cp service.json abhijeet/ Jun 23 19:34:02 bastion LinuxCommandsWazuh: User abhijeet [3244527]: 44 ls Jun 23 19:34:04 bastion LinuxCommandsWazuh: User abhijeet [3244527]: 45 cd abhijeet/ Jun 23 19:34:05 bastion LinuxCommandsWazuh: User abhijeet [3244527]: 46 ls Jun 23 19:34:10 bastion LinuxCommandsWazuh: User abhijeet [3244527]: 47 cat service.json Jun 23 19:34:35 bastion LinuxCommandsWazuh: User abhijeet [3244527]: 48 pwd Jun 23 19:35:30 bastion LinuxCommandsWazuh: User abhijeet [3244527]: 49 printenv Jun 23 19:37:34 bastion LinuxCommandsWazuh: User abhijeet [3244527]: 50 ls Jun 23 19:37:52 bastion LinuxCommandsWazuh: User abhijeet [3244527]: 51 gcloud auth activate-service-account --key-file="/home/abhijeet/service.json" Jun 23 19:38:15 bastion LinuxCommandsWazuh: User abhijeet [3244527]: 52 kubectl get all Jun 23 19:46:05 bastion LinuxCommandsWazuh: User ankit [3120266]: 256 ssh ankit@internal-tools Jun 23 20:51:03 bastion LinuxCommandsWazuh: User ubuntu [3292240]: 1485 ls Jun 23 20:51:04 bastion LinuxCommandsWazuh: message repeated 14 times: [ User ubuntu [3292240]: 1485 ls] Jun 23 20:51:16 bastion LinuxCommandsWazuh: User ubuntu [3292240]: 1485 ls Jun 23 23:41:50 bastion LinuxCommandsWazuh: User venky [3306357]: 1148 psql -h 10.94.16.3 -U postgres -d datapulse_v1 Jun 23 23:43:14 bastion LinuxCommandsWazuh: User venky [3306357]: 1149 mongo Jun 23 23:43:28 bastion LinuxCommandsWazuh: User venky [3306357]: 1150 kubectl scale --replicas=0 deployment/urlbird-jobs -n nitrox-production Jun 23 23:43:41 bastion LinuxCommandsWazuh: message repeated 2 times: [ User venky [3306357]: 1150 kubectl scale --replicas=0 deployment/urlbird-jobs -n nitrox-production] Jun 23 23:44:23 bastion LinuxCommandsWazuh: User venky [2499085]: 1149 kubectl get po | grep url Jun 23 23:44:29 bastion LinuxCommandsWazuh: User venky [2499085]: 1149 kubectl get po | grep url Jun 23 23:44:32 bastion LinuxCommandsWazuh: User venky [3307342]: 1216 kubectl get po | grep url Jun 23 23:44:51 bastion LinuxCommandsWazuh: message repeated 2 times: [ User venky [3307342]: 1216 kubectl get po | grep url]